You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Feat: adjust fields for ECS compatibility (#28)
Previously plugin was setting the top level command and host fields for every event (which aren't ECS compliant).
Also changes behavior not to override fields if they exists in the decoded payload (e.g. no longer force the host field if such a field is decoded from the command's output).
Co-authored-by: Ry Biesemeyer <yaauie@users.noreply.github.com>
Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>